>Уважаемые специалисты, я поднял пикс, вроде как настроил, но у меня не
>все открываются странички, сразу скажу, сначала мои серверы DNS не выходили
>через default gateway на пиксе, но потом я их провел через
>пикс, но картина не улучшилась, а наоборот ухудшилась, т.е. те, которые
>открывались, перестали открываться. И пинг с outside пропал. Сейчас все вернул
>на солярку, работает как часы. Что за чудеса, где это приведение
>с мотором спрятолось?
>Привожу свой конфиг:
>PIX Version 6.3(1)
>interface ethernet0 auto
>interface ethernet1 auto
>interface ethernet2 auto
>interface ethernet3 auto shutdown
>interface ethernet4 auto shutdown
>interface ethernet5 auto shutdown
>nameif ethernet0 outside security0
>nameif ethernet1 inside security100
>nameif ethernet2 Teleset security4
>nameif ethernet3 intf3 security6
>nameif ethernet4 intf4 security8
>nameif ethernet5 intf5 security10
>enable password lfBPBMUCB4cQTK6h encrypted
>passwd lfBPBMUCB4cQTK6h encrypted
>hostname MASTER
>domain-name admdi.ru
>fixup protocol ftp 21
>fixup protocol h323 h225 1720
>fixup protocol h323 ras 1718-1719
>fixup protocol http 80
>fixup protocol ils 389
>fixup protocol pptp 1723
>fixup protocol rsh 514
>fixup protocol rtsp 554
>fixup protocol sip 5060
>fixup protocol sip udp 5060
>fixup protocol skinny 2000
>fixup protocol smtp 25
>fixup protocol sqlnet 1521
>names
>access-list access_acl_inside permit ip host 192.168.2.12 any
>access-list access_acl_inside permit ip host 192.168.2.61 any
>access-list access_acl_inside permit ip host 192.168.2.62 any
>access-list access_acl_inside permit ip host 192.168.2.63 any
>access-list access_acl_inside permit ip host 192.168.2.64 any
>access-list access_acl_inside permit ip host 192.168.2.65 any
>access-list access_acl_inside permit ip host 192.168.2.66 any
>access-list access_acl_inside permit ip host 192.168.2.68 any
>access-list access_acl_inside permit ip host 192.168.2.69 any
>access-list access_acl_inside permit ip host 192.168.2.70 any
>access-list access_acl_inside permit ip host 192.168.2.3 any
>access-list access_acl_inside permit ip host 192.168.2.5 any
>access-list access_acl_inside permit ip host 192.168.2.9 any
>access-list access_acl_inside permit ip host 192.168.2.16 any
>access-list access_acl_inside permit ip host 192.168.2.60 any
>access-list access_acl_inside permit ip host 192.168.2.4 any
>access-list access_acl_inside permit ip host 192.168.2.11 any
>access-list access_acl_inside permit ip host 192.168.2.15 any
>access-list access_acl_outside permit tcp any host 62.213.82.BB eq smtp
>access-list access_acl_outside permit tcp any host 62.213.82.CC eq lotusnotes
>access-list access_acl_outside permit tcp any host 62.213.82.DD eq www
>access-list access_acl_outside permit tcp any host 62.213.82.EE eq 6000
>access-list access_acl_outside permit tcp any host 62.213.82.FF eq pptp
>access-list access_acl_outside permit tcp any host 62.213.82.HH eq www
>access-list access_acl_outside permit tcp any host 62.213.82.II eq lotusnotes
>access-list access_acl_outside permit tcp any host 62.213.82.SS eq pptp
>pager lines 24
>mtu outside 1500
>mtu inside 1500
>mtu Teleset 1500
>mtu intf3 1500
>mtu intf4 1500
>mtu intf5 1500
>ip address outside 217.23.151.ZZZ 255.255.255.252
>ip address inside 192.168.2.1 255.255.255.0
>ip address Teleset 192.168.75.100 255.255.255.0
>no ip address intf3
>no ip address intf4
>no ip address intf5
>ip audit info action alarm
>ip audit attack action alarm
>no failover
>failover timeout 0:00:00
>failover poll 15
>no failover ip address outside
>no failover ip address inside
>no failover ip address Teleset
>no failover ip address intf3
>no failover ip address intf4
>no failover ip address intf5
>pdm location 192.168.2.69 255.255.255.255 inside
>pdm history enable
>arp timeout 14400
>global (outside) 1 62.213.82.AA-62.213.82.XX
>global (outside) 1 62.213.82.ZZ
>nat (inside) 1 192.168.2.0 255.255.255.0 0 0
>static (inside,outside) 62.213.82.BB 192.168.2.4 netmask 255.255.255.255 0 0
>static (inside,outside) 62.213.82.CC 192.168.2.11 netmask 255.255.255.255 0 0
>static (inside,outside) 62.213.82.DD 192.168.2.63 netmask 255.255.255.255 0 0
>static (inside,outside) 62.213.82.EE 192.168.2.15 netmask 255.255.255.255 0 0
>static (inside,outside) 62.213.82.DD 192.168.2.9 netmask 255.255.255.255 0 0
>access-group access_acl_outside in interface outside
>access-group access_acl_inside in interface inside
>route outside 0.0.0.0 0.0.0.0 217.23.151.XXX 1
>timeout xlate 3:00:00
>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
>timeout uauth 0:05:00 absolute
>aaa-server TACACS+ protocol tacacs+
>aaa-server RADIUS protocol radius
>aaa-server LOCAL protocol local
>http server enable
>http 192.168.2.69 255.255.255.255 inside
>no snmp-server location
>no snmp-server contact
>snmp-server community public
>no snmp-server enable traps
>floodguard enable
>telnet timeout 5
>ssh 192.168.2.69 255.255.255.255 inside
>ssh 192.168.2.12 255.255.255.255 inside
>ssh timeout 60
>console timeout 0
>terminal width 80
>Cryptochecksum:e002dc7dc80ab561c9b045f50f333401
>: end

Ты бы лучше не последние цифры в IP прятал а вот это
enable password lfBPBMUCB4cQTK6h encrypted
passwd lfBPBMUCB4cQTK6h encrypted
Кол-во твоих скрытых адресов 254 что не очень много а вот пароль это да ... =)))